Microsoft Server, Small Business Server User Profiles and Permissions.
User profiles on a server can be very simple when you first start setting things up. But when you look closely you might notice you are giving permission levels that are higher than you really want the user to have.
We have see Domain Users setup as Backup Operators and Admin Domains due to some types of software requiring folder and file modification. This is in my opinion the wrong method because by setting up a Domain User with any Administrative rights you are just looking for problems down the road.
Here I'm going to suggest that you read Microsoft's Best Practices guide and then start your administrators profile log Book.
What's an Administrators Profile Log Book? It's the Text file or Word document that you keep detailing every little change you make regarding user access and permissions.
I've worked on enough servers to know down to the hour how long it takes me to document Global Policy Settings, File permission and Shared permissions. If each administrator would have taken the time to start an Administrators Profile Log Book they might still be in the loop. Their was a push years ago to standardize this log book but I believe lack of interest, job security and just plan lazy admins killed it.
But not to worry, here you'll see just how to log your user settings so when you get a call a 3AM regarding folder access you have a quick reference guide to why a user was denied access to your ClientApps/Office12 installation folder.
Topics Covered are listed below in the link index.
What will be posted today, User Profile Setup, Roaming Profiles, Remote Access Workplace and Remote Desktop Profile configuration.